Germany C5

C5, also known as Cloud Computing Compliance Controls Catalog (C5), is a German Government-backed cybersecurity compliance framework issued by Germany's Federal Office for Information Security (BSI). It specifically targets providers of cloud services, whether located in Germany or elsewhere, who intend to work with German public sector clients. C5 is also applicable to German organizations that do business in the German public sector as well. C5 establishes a baseline of security controls which cloud service providers must comply with to ensure a high level of data security and resilience for German cloud organizations.